Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Gaëtan Perrault (gatesvp@mstdn.ca)'s status on Thursday, 07-Mar-2024 17:15:45 JST Gaëtan Perrault

   in reply to

   @functionalscript @nzakas

   Google was able to pin directly to main because they had very strong internal contracts with all of the code they used.

   The vast majority of companies do not have these contracts in place. They leverage OSS code that they're not paying for. For which there is no explicit contract.

   As this post highlights: "I am not your supplier".

   Package Managers help regulate these contracts by at least providing you with a consistent copy of code../7